Ensuring Quality: To ensure the quality of the consulting engagement in the human resources department, the chief audit executive (CAE) can implement a fieldwork peer review process. This involves having experienced auditors review the work of their colleagues to ensure adherence to audit standards and procedures.
Efficiency and Effectiveness:
Peer Review: This method helps identify any issues or improvements needed in real-time, enhancing both the efficiency and effectiveness of the audit process.
Standardized Work Programs: While standardized work programs (option C) provide consistency, peer review adds a layer of quality assurance.
Supervision: Personal supervision by the CAE (option D) is not practical for ensuring the quality of all engagements.

Option D is correct because it directly tests the chronological relationship needed to identify purchases made before an authorized purchase order existed. By extracting invoices and comparing their dates with the corresponding purchase-order creation dates, the auditor can identify transactions in which the invoice or underlying purchase predates the official purchase order. Such exceptions can indicate retrospective or "after- the-fact" purchase orders and weaknesses in authorization controls. Option A focuses on purchase orders lacking invoices or receiving documentation. Option B identifies requisitions that did not progress to purchase orders but does not establish that a purchase actually occurred. Option C identifies open purchase orders without recorded receipts and therefore addresses fulfillment rather than preauthorization. The IIA Standards require auditors to select procedures that produce relevant, reliable, and sufficient evidence to accomplish engagement objectives; date comparison directly addresses the stated objective.

To determine which internal audit activity is performed in the design evaluation phase, it ' s essential to understand what each phase in the audit process entails. The design evaluation phase involves assessing whether the design of controls is adequate to mitigate risks to acceptable levels.
Option A: The internal auditor reviews prior audits and workpapers.
This activity typically occurs during the planning phase of an audit. Reviewing prior audits and workpapers helps the auditor understand the scope, findings, and context of previous audits, providing valuable information for planning the current audit.
Option B: The internal auditor identifies the controls over segregation of duties.
Identifying controls, particularly those related to segregation of duties, is a key part of the design evaluation phase. In this phase, the auditor assesses whether the control design, including segregation of duties, is sufficient to prevent or detect errors and fraud.
Option C: The internal auditor checks a process for completeness.
Checking a process for completeness is more aligned with the testing phase, where the auditor evaluates the operational effectiveness of controls. During this phase, the auditor ensures that all parts of a process are functioning as intended.
Option D: The internal auditor communicates the audit results to management.
Communicating audit results occurs in the reporting phase, after the audit fieldwork is complete. In this phase, the auditor summarizes findings, conclusions, and recommendations and presents them to management.
Reference:
According to the Institute of Internal Auditors (IIA) Standards and the guidelines in the IPPF (International Professional Practices Framework), during the design evaluation phase, internal auditors assess the adequacy of control designs. This includes evaluating whether controls like segregation of duties are properly designed to mitigate identified risks. Identifying controls over segregation of duties is a fundamental aspect of assessing the adequacy of the control environment and its design to ensure it can effectively prevent and detect errors and fraud.

According to IIA Standard 2600: Communicating the Acceptance of Risks, the CAE must inform senior management and the board if management decides to accept a risk that may exceed the organization's risk appetite. The branch manager's unilateral decision without consulting senior management constitutes a governance issue. Escalating the matter ensures proper oversight and adherence to the organization's risk management framework. Options B, C, and D do not fulfill the CAE's responsibility to ensure appropriate communication and accountability at the senior management level.

The most appropriate approach for internal audit activity to follow up on management action plans is to create a tracking system. This ensures that follow-up activities are systematically monitored and documented. Such a system can track the status of action plans, provide reminders for due dates, and record progress updates, thus ensuring that management's corrective actions are implemented and effective. Regular monitoring and tracking are essential to verify that issues identified in audits are addressed in a timely manner.
Institute of Internal Auditors (IIA) Standards: Implementation Standards 2500 - Monitoring Progress COSO Framework: Monitoring Activities Component